Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revisionBoth sides next revision
toh:netgear:wndr4300 [2018/05/02 22:21] – [Netgear WNDR4300] wrtboytoh:netgear:wndr4300 [2023/05/19 17:18] – [Hardware Highlights] 1Gbit ports danitool
Line 1: Line 1:
-====== Netgear WNDR4300 ======+====== NETGEAR WNDR4300 v1 ====== 
 +{{:media:netgear:wndr4300:wndr4300_front_transparent.png?nolink&200}}
  
-There are two retail versions of this router:+//This page covers WNDR4300 **v1** and WNDR4300SW.// 
 + 
 +There are several versions of this router:
   * **V1**: The label at the bottom of the router says //WNDR4300//. Similar to [[toh:netgear:WNDR3700]]**v4** but 3T3R. OpenWrt forum [[https://forum.openwrt.org/viewtopic.php?id=41094|thread]] on WNDR3700v4. Stock Netgear WNDR4300v1 comes pre-installed with a modified version of OpenWrt Kamikaze (bleeding-edge, r18571). One can access a terminal on the WNDR4300v1 by using telnet.   * **V1**: The label at the bottom of the router says //WNDR4300//. Similar to [[toh:netgear:WNDR3700]]**v4** but 3T3R. OpenWrt forum [[https://forum.openwrt.org/viewtopic.php?id=41094|thread]] on WNDR3700v4. Stock Netgear WNDR4300v1 comes pre-installed with a modified version of OpenWrt Kamikaze (bleeding-edge, r18571). One can access a terminal on the WNDR4300v1 by using telnet.
-  * **V2**: The label at the bottom of the router says //WNDR4300**v2**//Forum thread -> https://forum.openwrt.org/viewtopic.php?id=56889 +  * **V2**: The label at the bottom of the router says //WNDR4300**v2**//For **v2** see [[toh:netgear:wndr4300_v2|NETGEAR WNDR4300 v2]] 
 +  * **SW**:  SureWest, Northern California ISP Hardware identical to the **V1** hardware with a custom OpenWrt Kamikaze SureWest build Will only accept OpenWrt/LEDE firmware after modifying the 128 byte header and checksum values up till 19.07. Subsequent releases will have a separate SW image.
    
 Note: in menuconfig, in order to see "WNDR4300" in "Target Profile", first set "Subtarget" to "Generic devices with NAND flash". Note: in menuconfig, in order to see "WNDR4300" in "Target Profile", first set "Subtarget" to "Generic devices with NAND flash".
- 
-Other versions: 
-  * **SW**:  SureWest, Northern California ISP.  Hardware identical to the **V1** hardware with a custom OpenWrt Kamikaze SureWest build.  Will only accept OpenWrt/LEDE firmware after modifying the 128 byte header and checksum values. 
  
 ===== Supported Versions ===== ===== Supported Versions =====
 ---- datatable ---- ---- datatable ----
-cols    : Brand, Model, Versions, Supported Current Rel, OEM device homepage URL_url, OWrt Forum Topic URL_url, Device Techdata_pageid +cols    : Brand, Model, Versions, Supported Since Rel, Supported Current Rel, OEM device homepage URL_url, Forum search_search-forums, Device Techdata_pageid 
-headers : Brand, Model, Version, Current Release, OEM Info, Forum Topic, Technical Data +headers : Brand, Model, Version, Supported Since, Current Release, OEM Info, Forum Search, Technical Data 
-align   : c,c,c,c,c,c,+align   : l,l,c,c,c,c,
-filter  : Model=WNDR4300+filter  : Model*~WNDR4300 
 +filter  : Version=v1
 ---- ----
  
-^ Version/Model ^ Launch Date ^ S/N ^ Router firmware version ^ OpenWrt Version ^ Model Specific Notes ^ +:!: **SW** model has hardware identical to **v1** but OpenWrt firmware requires modified 128 byte header and checksum
-| **v1** | 2012-08 | - | V1.0.1.30 (Kamikaze r18571) | Chaos Calmer 15.05.1 | [[https://dev.openwrt.org/browser/trunk/target/linux/ar71xx/files/arch/mips/ath79/mach-wndr4300.c?rev=34647&order=name|kernel support]] +
-| **v2** | ~2014-12 | - | V1.0.0.26, ? | <color red>**not supported**</color> |  | +
-**SW** | | - | V1.0.0.2, (Kamikaze) |same as **v1** hardware identical to **v1** but OpenWRT firmware requires modified 128 byte header and checksum |+
  
 :!: Before Barrier Breaker 14.07 RC1, sysupgrade and persistent system settings used to be problematic on WNDR4300v1, but those have been fixed from 14.07 RC1 on. :!: Before Barrier Breaker 14.07 RC1, sysupgrade and persistent system settings used to be problematic on WNDR4300v1, but those have been fixed from 14.07 RC1 on.
Line 30: Line 29:
 ===== Hardware Highlights ===== ===== Hardware Highlights =====
 ---- datatable ---- ---- datatable ----
-cols    : Model, Versions, CPU, CPU MHz, Flash MB_mbflashs, RAM MB_mbram, WLAN Hardware, WLAN 2.4GHz, WLAN 5.0GHz, Ethernet 100M ports_, Ethernet Gbit ports_, Modem, USB ports_ +cols    : Model, Versions, CPU, CPU MHz, Flash MB_mbflashs, RAM MB_mbram, WLAN Hardware, WLAN 2.4GHz, WLAN 5.0GHz, Ethernet 100M ports_, Ethernet 1Gbit ports_, Modem, USB ports_ 
-header  : Model, Version,SoC,CPU MHz,Flash MB,RAM MB,WLAN Hardware,WLAN2.4,WLAN5.0,100M ports,Gbit ports,Modem,USB+header  : Model, Version,SoC,CPU MHz,Flash MB,RAM MB,WLAN Hardware,WLAN2.4,WLAN5.0,100M ports,1Gbit ports,Modem,USB
 align   : c,c,c,c,c,c,c,c,c,c,c,c,c align   : c,c,c,c,c,c,c,c,c,c,c,c,c
-filter  : Model=WNDR4300+filter  : Model*~WNDR4300 
 +filter  : Version=v1
 ---- ----
- 
-^ Version ^ SoC ^ Ram ^ Flash ^ Network ^ Wireless ^ USB ^ Serial ^ JTag ^ Wiki ^ FCCid ^ 
-| **v1** | Atheros AR9344 560MHz | 128MiB | 128MiB NAND | 1 WAN + 4x LAN (GBit) | AR9580 [an 3x3:3] + AR9344 [bgn 2x2:2] | Yes | Yes | Yes | [[https://wikidevi.com/wiki/Netgear_WNDR4300|here]] | PY312100187 | 
-| **v2** | Atheros QCA9563 | 128MiB | 2MiB SPI NOR + 128MiB SPI NAND | 1 WAN + 4x LAN (GBit) | AR9580 [an 3x3:3] + QCA9563 [bgn 2x2:2] | ? | ? | ? | [[https://wikidevi.com/wiki/Netgear_WNDR4300v2|here]] | PY314200276 | 
  
  
Line 46: Line 42:
 headers : Model, Version, Current Release, Firmware OpenWrt Install, Firmware OpenWrt Upgrade, Firmware OEM Stock headers : Model, Version, Current Release, Firmware OpenWrt Install, Firmware OpenWrt Upgrade, Firmware OEM Stock
 align   : l,c,c align   : l,c,c
-filter  : Model=WNDR4300+filter  : Model*~WNDR4300 
 +filter  : Version=v1
 ---- ----
  
Line 58: Line 55:
   - Connect your computer to the router with an ethernet cable and browse to ''%%http://192.168.1.1/%%''\\ (default credentials are ''admin password'')   - Connect your computer to the router with an ethernet cable and browse to ''%%http://192.168.1.1/%%''\\ (default credentials are ''admin password'')
   - In Netgear web interface go to:\\ ''<color purple>Advanced > Administration > Firmware Upgrade </color>''   - In Netgear web interface go to:\\ ''<color purple>Advanced > Administration > Firmware Upgrade </color>''
-  - Upload the Openwrt firmware:\\ ''lede-17.01.3-ar71xx-nand-wndr4300-ubi-**factory**.img''+  - Upload the Openwrt firmware:\\ ''openwrt-19.07.3-ar71xx-nand-wndr4300-ubi-**factory**.img''
   - Proceed with the firmware installation and wait some minutes until it finish.   - Proceed with the firmware installation and wait some minutes until it finish.
  
Line 66: Line 63:
 :!: To restore the original Netgear firmware, the firmware files downloaded from Netgear (.img files) can be tftp'd directly to the router (the chapter [[toh:netgear:wndr3700#recovery_flash_in_failsafe_mode|Recovery flash in failsafe mode]] of the Netgear WNDR3700 page is applicable for WNDR4300 too). :!: To restore the original Netgear firmware, the firmware files downloaded from Netgear (.img files) can be tftp'd directly to the router (the chapter [[toh:netgear:wndr3700#recovery_flash_in_failsafe_mode|Recovery flash in failsafe mode]] of the Netgear WNDR3700 page is applicable for WNDR4300 too).
  
-  - set a static IP on your computer, i.e 192.168.1.35, and connect the ethernet cable to the router +  - set a static IP on your computer, i.e 192.168.1.2/24 (a.k.a. 192.168.1.2 with a netmask of 255.255.255.0), and connect the ethernet cable to the router (it is important that the cable is plugged in before the following steps) 
-  - power on the router +  - power off the router 
-  - press and hold the RESET button as soon as the switch LEDs light up. +  - press and hold the RESET button (factory reset button on the bottom with the red circle around it) 
-  - keep holding RESET until the power LED begins to flash orange and then green.+  - turn on the router while continuing to hold the RESET 
 +  - continue to hold the RESET button until the power LED begins to flash orange and then flashes green
   - once the power LED is flashing green, release RESET   - once the power LED is flashing green, release RESET
   - start the TFTP transfer to router at 192.168.1.1. In your computer execute:\\ <code bash>tftp 192.168.1.1 -m binary -c put factory.img</code>   - start the TFTP transfer to router at 192.168.1.1. In your computer execute:\\ <code bash>tftp 192.168.1.1 -m binary -c put factory.img</code>
  
 +
 +==== Debrick with Uboot and TFTP ====
 You can also break into Uboot command line via serial interface and execute:\\ You can also break into Uboot command line via serial interface and execute:\\
 ''fw_recovery''\\ ''fw_recovery''\\
 Then you can send the factory firmware via tftp client from the computer. Then you can send the factory firmware via tftp client from the computer.
 +
 +==== Debrick with nmrpflash ====
 +
 +See [[https://github.com/jclehner/nmrpflash|nmrpflash github page]]
  
  
Line 84: Line 88:
   - put the xxxxxx-wndr4300-initramfs-uImage.bin into the TFTP server at your computer   - put the xxxxxx-wndr4300-initramfs-uImage.bin into the TFTP server at your computer
   - boot the router and break into the Uboot command line, via serial console   - boot the router and break into the Uboot command line, via serial console
-  - enter the following into Uboot command line: <code bash>tftpboot 80800000 xxxxxx-wndr4300-initramfs-uImage.bin+  - enter the following into Uboot command line: <code bash>tftpboot 82000000 xxxxxx-wndr4300-initramfs-uImage.bin
 bootm </code>  bootm </code> 
   - The system should boot!   - The system should boot!
Line 259: Line 263:
 ==== Info ==== ==== Info ====
 | ^ V1 ^ | ^ V1 ^
-| **[[wp>Instruction set]]:**    | [[wp>MIPS architecture|MIPS]] | +[[wp>Instruction set]]       | [[wp>MIPS architecture|MIPS]] | 
-| **Vendor:**                    | [[wp>Qualcomm Atheros]] | +Vendor                       | [[wp>Qualcomm Atheros]] | 
-| **[[docs:techref:bootloader]]:**           | [[docs:techref:bootloader:uboot|U-Boot]] | +[[docs:techref:bootloader]]  | [[docs:techref:bootloader:uboot|U-Boot]] | 
-| **[[docs:techref:hardware:soc|System-On-Chip]]:**  | AR9344 | +[[docs:techref:hardware:soc|System-On-Chip]]  | AR9344 | 
-| **[[docs:techref:hardware:cpu|CPU]] @Frq:**        | MIPS 74Kc @560MHz | +[[docs:techref:hardware:cpu|CPU]] @Frq        | MIPS 74Kc @560MHz | 
-| **Flash-Chip:**      | Micron 29F1G08ABADA | +Flash-Chip         | Micron 29F1G08ABADA | 
-| **Flash size:**      | 128 MiB NAND | +Flash size         | 128 MiB NAND | 
-| **RAM:**             | Nanya NT5TU32M16DG-AC / DDR2-800 +RAM                | Nanya NT5TU32M16DG-AC / DDR2-800 
-| **RAM size:**             | 128 MiB   | +RAM size           | 128 MiB   | 
-| **Wireless:**        | Atheros AR9340 2.4GHz 802.11bgn, **2T2R** | +Wireless           | Atheros AR9340 2.4GHz 802.11bgn, **2T2R** | 
-| :::                  | Atheros AR9580 5GHz 802.11an, **3T3R** | +| :::                | Atheros AR9580 5GHz 802.11an, **3T3R** | 
-| **RegDomain:**       | US | +RegDomain          | US | 
-| **Ethernet:**        | Atheros AR8327 Gigabit Switch | +Ethernet           | Atheros AR8327 Gigabit Switch | 
-| **USB:**             | Yes 1 x 2.0     | +USB                | Yes 1 x 2.0     | 
-| **PSU:**             | 12V DC 2.5A / P030WF120B     | +PSU                | 12V DC 2.5A / P030WF120B     | 
-| **[[docs:techref:hardware:port.serial|Serial]]:**   | [[#Serial|Yes]]   | +[[docs:techref:hardware:port.serial|Serial]]      | [[#Serial|Yes]]   | 
-| **[[docs:techref:hardware:port.jtag|JTAG]]:**       | [[#JTAG|Yes]]     |+[[docs:techref:hardware:port.jtag|JTAG]]          | [[#JTAG|Yes]]     |
  
 ==== Photos ==== ==== Photos ====
-Available here: http://uk.hardware.info/reviews/3685/4/netgear-wndr4300-review-3800+40004300-photos-and-screenshots+Available here: [[http://uk.hardware.info/reviews/3685/4/netgear-wndr4300-review-3800+40004300-photos-and-screenshots]]
  
 Model Number Model Number
Line 1124: Line 1128:
   * please follow => [[toh:netgear:telnet.console|Unlocking the Netgear Telnet Console]]   * please follow => [[toh:netgear:telnet.console|Unlocking the Netgear Telnet Console]]
  
 +
 +==== EEPROM regdomain ====
 +As default the //regdomain// in the wifi EEPROM comes with the //0x00// value which defaults to US country. Therefore the number of channel will be limited as default. The EEPROMs are extracted from the //caldata// partition and copied on the first boot to the **/lib/firmware** path. 
 +
 +The regdomain is at offset **0x1C** in both 2.4GHz and 5GHz EEPROMs:
 +
 +{{:media:netgear:wndr4300:eeprom-ar9340.png?direct&400|}}
 +
 +You can hex edit theese files directly to change the regdomain to match your country. Example using the command line:
 +  * Change the regdomain value to //0xD4//: <code bash>echo -ne \\xD4 | dd of="/lib/firmware/ath9k-eeprom-ahb-18100000.wmac.bin" bs=1 seek=$((0x1C)) conv=notrunc</code>
 +  * Check if the change was correct: <code bash>hexdump "/lib/firmware/ath9k-eeprom-ahb-18100000.wmac.bin"</code>
 +<WRAP center round important 60%>
 +Always keep an original backup from your **"caldata"** partition, it is specific for your device and shouldn't be interchangeable.
 +</WRAP>
 +If we wanted to make the change forever, then "caldata" partition should also be edited at offsets **0x101C** (for the 2.4GHz radio) and **0x501C** (for the 5GHz radio). Example using the command line:\\ 
 +(Tested under OpenWrt 22.03.2)
 +  * Check where the caldata partition is: <code>root@WNDR4300:~# cat /proc/mtd 
 +dev:    size   erasesize  name
 +mtd0: 00040000 00020000 "u-boot"
 +mtd1: 00040000 00020000 "u-boot-env"
 +mtd2: 00040000 00020000 "caldata"
 +mtd3: 00080000 00020000 "pot"
 +mtd4: 00200000 00020000 "language"
 +mtd5: 00080000 00020000 "config"
 +mtd6: 00300000 00020000 "traffic_meter"
 +mtd7: 00400000 00020000 "kernel"
 +mtd8: 01500000 00020000 "ubiconcat0"
 +mtd9: 01900000 00020000 "firmware"
 +mtd10: 00040000 00020000 "caldata_backup"
 +mtd11: 06000000 00020000 "ubiconcat1"
 +mtd12: 07500000 00020000 "ubi"
 +</code>
 +  * Dump the partition somewhere (without OOB): <code>dd if=/dev/mtd2 of=/tmp/caldata.bin</code>
 +  * Change the 2.4 GHz regdomain <code>echo -ne \\xD4 | dd of=/tmp/caldata.bin bs=1 seek=$((0x101C)) conv=notrunc</code>
 +  * Check if the change was correct with hexdump: <code>hexdump -s 0x1000 -n 1088 -C /tmp/caldata.bin</code>
 +  * Install kmod-mtd-rw<code>opkg update
 +opkg install kmod-mtd-rw</code>
 +  * Make the caldata partition writeable: <code>insmod mtd-rw i_want_a_brick=1</code>
 +  * Write back to the "caldata" partition: <code bash>mtd write /tmp/caldata.bin caldata</code>
 +  * Check if the "caldata" partition was succesfully written with hexdump: <code>hexdump -C /dev/mtd2</code>
 +
 +
 +  
 ====5G radio==== ====5G radio====
  
Line 1169: Line 1216:
 ===== Tags ===== ===== Tags =====
 [[meta:tags|How to add tags]] [[meta:tags|How to add tags]]
-{{tag>74k 128flash gt32flash 128ram 802.11abgn_simultan 802.11abgn ar9344 QCA9563 mips 3x3}}+{{tag>ath79 ar9344 128nand 128ram 5port gigabitethernet ath9k 802.11abgn_simultan 802.11abgn 5ant gt32flash mips 74k}}
  • Last modified: 2024/06/27 06:33
  • by oldherl